CVE-2020-4319

CVSS 3.1 LOWEPSS 0.7%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 3.1EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 jul 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402.

CVSS:3.0/UI:N/I:N/PR:L/S:U/C:L/AC:H/A:N/AV:N/E:U/RC:C/RL:O

Productos afectados

IBM · MQ Appliance

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/177402 https://www.ibm.com/support/pages/node/6252777